Data Protection

We, Genussboten (Genussboten Catering GmbH, Staakener Straße 53-63, 13581 Berlin, info@genussboten-catering.de), are committed to protecting your personal rights when processing your personal information. In our contact with you, we will comply with the currently applicable regulations in this regard, in particular the General Data Protection Regulation (EU GDPR), the Federal Data Protection Act (BDSG), and the Telemedia Act (TMG).

Below, we have compiled the most important information regarding typical data processing for you. For certain data processing activities that only affect specific groups, information obligations are fulfilled separately.

Where the term “data” is used in the text, it refers solely to personal data within the meaning of the EU GDPR or the BDSG.

Website visitors
Interested parties, communication partners
Business partners and their employees
Social media plugins or links to social media platforms
Rights of data subjects and further information

1. Website visitors

1.1 Server log data

With every request, our web server processes a series of data that your web browser automatically transmits to our web server. This includes the IP address currently assigned to your device, the date and time of the request, the time zone, the specific page or file accessed, the HTTP status code, and the amount of data transferred; additionally, the website from which your request originated, the browser used, your device’s operating system, and the language setting. The web server uses this data to display the content of this website on your device in the best possible way. Communication between the web browser and the web server is not possible without this data.

1.2 Analysis of usage behavior

This website uses Google Analytics in combination with Google Signals, a web analysis and tracking service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server and stored there.

Google Signals merges this information if you have consented to personalized advertising. As the website operator, we have no way of accessing this raw data.

The data processed in this context provides information about the use of the website, as well as the logging of clicks on individual elements. We use this to evaluate usage behavior, analyze the effectiveness of online marketing measures, and select online advertising on other platforms, which are automatically selected using real-time bidding based on usage behavior. This is subject to your consent according to Art. 6 (1) (a) GDPR. Data is also transmitted for this purpose to the independent controller Google Ireland Limited, Google Building Gordon House Barrow St, Dublin, Dublin 4, Ireland. The legal basis for this data transfer to Google Ireland Limited is your consent according to Art. 6 (1) (a) GDPR.

This may also mean a transfer of data to a country outside the European Union. The transfer of data to the USA takes place on the basis of Art. 45 GDPR in conjunction with the adequacy decision C(2023) 4745 of the European Commission, as the data recipient has committed to complying with the data processing principles of the Data Privacy Framework (DPF).

IP anonymization is activated for this website, meaning your IP address will be shortened beforehand by Google within the European Union or in another state party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there.

Google will use this information as a processor according to Art. 28 GDPR to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator.

You can prevent the storage of cookies by adjusting your browser software settings accordingly. You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at http://tools.google.com/dlpage/gaoptout?hl=en. If you do not want your website activity to be available to Google Analytics, you can install the Google Analytics opt-out browser add-on. This prevents activity data from being shared with Google Analytics via the JavaScript executed on websites (ga.js, analytics.js and dc.js).

1.3 As already described, the purpose of data processing is the presentation of our company and its offers on the internet, as well as the exchange with communication partners.

1.4 The legal basis for processing is Article 6(1)(f) GDPR (legitimate interest, operation of an internet presence, and exchange with communication partners). The legal basis for processing data for newsletters is Article 6(1)(a) in conjunction with Art. 7 GDPR (consent). The legal basis for the analysis of usage behavior is Article 6(1)(f) GDPR (legitimate interest, namely the needs-based design of the website).

1.5 Log and communication data will not be passed on to third parties unless special circumstances arise. In the event of a suspected criminal offense or in investigative proceedings, data may be transmitted to the police and public prosecutor’s office.

1.6 IP addresses are anonymized after 24 hours at the latest. Pseudonymous usage data is deleted after three months.

1.7 Use of the website is not possible without disclosing personally identifiable data such as the IP address. Use of the website is also possible if the pseudonymous usage analysis has been objected to.

2. Interested parties, communication partners

2.1 We process the data of interested parties and communication partners for the purpose of communicating with the data subjects. We process catering inquiries via the website for the purpose of checking the feasibility of the inquiries and processing the inquiry. If you apply for employment with us via this website, we use the contact information to get in touch with you and discuss the potential future employment relationship. Contact information includes your name, email address, a telephone number, and any application documents submitted.

2.2 The legal basis for the processing of interested parties and other communication partners is Article 6(1)(f) GDPR (legitimate interest, namely communication with interested parties and communication partners). For catering inquiries, the legal basis for processing for natural persons is Article 6(1)(b) GDPR (preparation and performance of the contract), and for legal entities, Article 6(1)(f) GDPR (legitimate interest, namely communication with contract-relevant contact persons).

2.3 We forward inquiries internally to the responsible employees. Furthermore, we use service providers as processors in the provision of services, in particular for the provision, maintenance, and care of IT systems. Submitted application documents will not be forwarded.

2.4 Inquiries and communication are automatically deleted after ten calendar years at the latest. Data from booking inquiries after six months.

2.5 The provision of data is necessary for interested parties and communication partners. Communication is not possible without providing data.

3. Business partners and their employees

3.1 The purpose of processing is the preparation and performance of contracts as well as communication with employees of business partners.

3.2 The legal basis for processing is Article 6(1)(b) GDPR for contracts with natural persons (preparation and performance of the contract), Article 6(1)(f) GDPR for contracts with legal entities (legitimate interest, namely communication with contract-relevant contact persons), and always Article 6(1)(c) GDPR (legal obligations, in particular tax and commercial law regulations).

3.3 Recipients of data may be banks for the processing of payments. Authorities and offices may be recipients within the scope of their duties, insofar as we are obliged or entitled to transmit data. Furthermore, we use service providers as processors in the provision of services, in particular for the provision, maintenance, and care of IT systems.

3.4 All contract- and booking-relevant data will be stored for a period of ten calendar years after the end of the contract in accordance with tax and commercial law retention periods.

3.5 The provision of data is both legally and contractually mandatory for business partners and their employees. The business relationship cannot be established and carried out without providing data.

4. Social media plugins or links to social media platforms

Some pages contain buttons from social media networks (such as Facebook, Google, Instagram, Twitter, Pinterest, Xing, reddit, or LinkedIn), which you can use to recommend Genussboten GmbH’s offers to your friends and acquaintances. To ensure that you have full control over your data, the buttons used only establish direct contact between the respective social network and the visitor when you actively click on the button (1-click solution).

We use the pictograms of the respective social media network on our pages. Only by clicking on the pictogram will you be directed to the company page on the respective social media platform. The social media platforms and the third-party content providers that can be reached via the pictograms provide these services and process their data under their own responsibility.

By activating the social media plugin or link via the pictogram, including for sharing content (Art. 6(1)(a) GDPR), the following data may be transmitted to the social media providers: IP address, browser information, operating system, screen resolution, installed browser plugins such as Adobe Flash Player, previous website if you followed a link (referrer), the URL of the current website, etc. The next time the page is called up, the social media plugins are again provided in the preset inactive mode, so that it is ensured that no data is transmitted when the page is visited again. Further information on social media plugins regarding the scope and purposes of the respective data processing, as well as further data protection-relevant information, can be found in the privacy policies of the respective controller and on the 1-click solution at Heise.de.

5. Rights of data subjects and further information

5.1 Data will not be transferred to third countries without your consent.

5.2 We do not use automated individual decision-making processes.

5.3 You have the right to request information at any time about all personal data that we process about you.

5.4 If your personal data is incorrect or incomplete, you have a right to rectification and completion.

5.5 You can request the deletion of your personal data at any time, provided that we are not legally obliged or entitled to further process your data.

5.6 If the legal requirements are met, you can request a restriction on the processing of your personal data.

5.7 You have the right to object to the processing insofar as the data processing is carried out for the purpose of direct marketing or profiling.

5.8 If the processing is based on a balancing of interests, you can object to the processing by stating reasons arising from your particular situation.

5.9 If the data processing is based on your consent or within the framework of a contract, you have a right to the transfer of the data provided by you, provided that this does not affect the rights and freedoms of other persons.

5.10 If we process your data on the basis of a declaration of consent, you have the right to withdraw this consent at any time with effect for the future. Processing carried out before a withdrawal remains unaffected by the withdrawal.

5.11 You also have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that data processing has been carried out in violation of applicable law.

As of February 2024